Legal Framework & Transparency

KOHSTO is designed and maintained from France by an independent product builder. The platform documents responsible streaming and VPN practices for individuals and organizations.

• Status: independent digital service published in France (publisher: KOHSTO – contact@kohsto.com)
• Editorial direction and publication responsibility: KOHSTO
• Service available as a guest experience or through a Supabase-hosted user account

The web app and APIs rely on specialized providers selected for their GDPR compliance and security posture.

• Front-end, CDN, and logging: Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States (EU and US data centers)
• Database, authentication, and account storage: Supabase B.V., Amsterdam (project hosted in the European Union)
• Cache and abuse prevention: Upstash Inc. (serverless Redis, EU/US regions); IP keys retained only for the throttle window (60 s)
• Occasional geolocation lookup: ip-api.com (IP-API, United States) converts IP addresses into countries, cached for 24 h

For legal questions, rights requests, or content reports, please use the written channel to ensure traceability.

• Single contact email: contact@kohsto.com
• Requests handled within two business days
• Any data access or deletion request must include the email used on the platform

Visuals, logos, and metadata used to describe content remain the property of their rights holders; KOHSTO provides the editorial and orchestration layer.

• Editorial elements (copy, web interface, extension, orchestrator): © KOHSTO
• Program metadata: The Movie Database (TMDB) – https://www.themoviedb.org
• Availability and offer data: JustWatch – https://www.justwatch.com
• Brand names mentioned (Netflix, Disney+, NordVPN, etc.) belong to their respective owners

Funding combines consented advertising, trackable affiliations, and voluntary support; each activation is documented in the privacy policy.

• Display ads via Google AdSense only after 'Marketing' consent
• Affiliate redirects to selected VPN providers; each click notifies the KOHSTO Cloud platform (provider, platform, optional device identifier)
• Optional support through Buy Me a Coffee (service operated by Buy Me a Coffee Inc.)

The service applies a minimization approach: no personal data is required to browse catalogues; optional accounts synchronize watchlists and preferences.

• Accounts and watchlists hosted on Supabase (email, hashed password, tracked titles, preferences, and search history)
• Abuse prevention: IP address and user agent temporarily stored in Upstash (kept only for the rate limiting window)
• Cookiebot (Cybot A/S) records your consent; analytics or marketing scripts remain inactive until you opt in to the relevant categories
• Exercise GDPR rights by emailing contact@kohsto.com or via the account page (profile deletion)